Random Thoughts - Second Edition

[Pol]

Ugh, what a relief.

[Asheera]

What makes you so sure he isn't under the effect of alcohol now as well?

[Pol]

Doesn't matter. Now.
(Here are zero chances for him)

[Avonu]

Nearly half of a day I searched (specific) picture/wallpaper from HV in net. I didn't find it. But guess what, I run HV and this picture was when game start (file named splash.bmp).
The hardest thing to find it is something what you have close to you.

[Asheera]

The hardest thing to find it is something what you have close to you.

Haha true

I remember (a long time ago) my grandmother searching for her glasses when she had them on her nose

[Kalah]

http://mightandmagic.uk.ubi.com/downloads.php

[Avonu]

I remember (a long time ago) my grandmother searching for her glasses when she had them on her nose

This remember me some poem about Mr. Hilary who seek his glasses. He searched all his house and found them. At last he looked at mirror. Guess where were they?

@Kalah
Been there (and Nival site, CH, AoH and many more).
There isn't the wallpaper I was looking for. Anyway, I found it some time ago.

[Asheera]

This is the THIRD time HC gets infected with that stupid malicious code.

I don't know much about networking and servers and stuff like that, but can an expert please tell me how can someone inject some data at the end to your .php files? Because all php files seem to be modified by this hack (they have something added at the end). I think the hacker is using a flaw in the system.

I googled about this problem, and it seems that a lot of servers have these problems, not just HC. The admins still have no idea how could their files be modified like that.

How can somebody modify the server files just like that?

[Asheera]

(sorry, I just realized the above question is silly since even if you know how, telling us will leave the site vulnerable to hacking attacks So disregard it)

btw, I see that there has been some clean-up with the Sticky threads

[Milla aka. the Slayer]

You like? Kalah and I did that. We thought there were way too many stickies. So we hope you like it I might post one of those Nitty-Gritty things just to get things moving. Though I think people here know all about me already

[darknessfood]

No, please introduce yourself in the tread !

[Asheera]

Yes I like it, it's much 'cleaner' now. Thanks Milla and Kalah

[Borsuc]

How can somebody modify the server files just like that?

If the server is accessible via ftp then it's enough to know the admin login & password (of the ftp access of course not necessarily the forum account).

[Milla aka. the Slayer]

No, please introduce yourself in the tread !

It be done. It's short though

Thanks Asheera. It's nice to be appreciated

[Asheera]

@Borsuc: But I highly doubt that all those server's passwords have been cracked. Also, this seems to be the work of a bot, and not a human directly, since it adds some malicious code at the end in a 'silly' way (easily identifiable). And it also 'skipped' some server's files because they didn't have the .php extension. It's clear that it's a bot.

Also, some admins said (on a forum I found with Google) that they disabled ftp access to their server, so that can't be the way the hackers did it.

@Milla: One suggestion: maybe you should post a link to the old Introduction thread in the new one?

[Borsuc]

@Borsuc: But I highly doubt that all those server's passwords have been cracked. Also, this seems to be the work of a bot, and not a human directly, since it adds some malicious code at the end in a 'silly' way (easily identifiable). And it also 'skipped' some server's files because they didn't have the .php extension. It's clear that it's a bot.

Most passwords are cracked by bots...

Also, some admins said (on a forum I found with Google) that they disabled ftp access to their server, so that can't be the way the hackers did it.

I don't know of any other way to access it, unless you can go directly into the server's ports which is highly unlikely given a firewall.

But I'm not very good at networking so don't take my word for granted.

[Asheera]

Most passwords are cracked by bots...

But my point was that shouldn't the bot give the pass to the cracker so that he'll have easy access to the servers? I don't think any pass has been cracked though... I think they exploited a flaw in the system or something, which allowed them to bypass passwords and firewalls and other things like that.

But I said I don't know much about networking and servers and stuff... So I may be completely wrong

[Borsuc]

That is, if the cracker is only interested in this server. Usually most of them make bots and then apply them to hundreds of servers, so why would he be manually interested in one particular server?

[Asheera]

Ok how about this: Shouldn't the bot change the pass if it cracked it, so that the admins won't be able to transfer files anymore (and 'fix' the problem)?

[Borsuc]

I don't think you can change the pass/account with ftp (that means, using that protocol), it's just a file transfer protocol. Passwords are not "files" stored on the server.

But someone more inclined on networking can clear this up